Trusted Paperless Application Solution for Logistics

1.Email encryption and digital signature automation solution

Express & logistics companies have a large number of emails need to be processed every day. These emails almost involve many confidential information of customers and partners, but they are all cleartext emails, which are very easy to be illegally stolen and tampered with. This is an email security problem that must be resolved as soon as possible.

To ensure the security and confidentiality of the email, the content of the email itself must be encrypted. To ensure the credibility of the email without being counterfeited, every outgoing email must be digitally signed. To ensure the time of the sent email is credible, every outgoing email must be timestamped.

Express & logistics companies simply change the current email client to MeSign APP to achieve full encryption, end-to-end encryption and fully automatic encryption, as well as fully automatic digital signature and timestamp. If express & logistics companies think it is not practical to change their email client, then they can deploy MeSign Mail Gateway to encrypt every outgoing email without changing email client.

And we recommend that express & logistics companies can deploy their own cryptographic key management system (KM) to fully control their encryption keys to meet the high security requirements of email security.

Using MeSign for end-to-end email encryption will enable express & logistics companies to truly implement mobile working, which not only meets the urgent needs of mobile working, but also meets the high security requirements for email.

As shown in the following diagram on the left, in order to ensure that the encryption key is highly secure and controllable, express & logistics companies only needs to connect the plug-and-play KM device to the intranet. All staff’s computers and mobile devices must be able to connect to KM device to get the encrypting certificate private key. After successfully obtaining the encrypting certificate, the email encryption can be used normally. KM devices cannot access the Internet and are limited to employee computers and mobile devices access in intranet to ensure the device and private key security. Express & logistics companies can also build their own CA to issue certificate for its users instead of using the MeSign default CA. MeSign provide a plug-and-play CA device that just need to connect to internal network, MeSign APP will get the signing certificate and encryption certificate from this in-house CA system, not from MeSign default CA.

In other words, MeSign encryption solution allows express & logistics companies to achieve complete and autonomous control of confidential emails by simply managing and controlling the encryption key and/or issue the certificate by itself even the application environment is untrustworthy.

2.E-document signing and encryption automation solution

The express & logistics industry has a large number of paper documents and forms to process every day, such as courier orders, signing receipts, inventory reports, sales invoices, labor contracts, and the internal document approval and signing. They have begun to shift to paperless, but the problem is how to ensure that these electronic documents are really issued by logistics company, have not been impersonated or tampered . At present, the only feasible technical solution is to digitally sign all express & logistics document in PDF with timestamp and send them to users using encryption.

MeSign not only has digital signature automation solution that can help the PDF documents generated by the internal express & logistics systems to achieve a trusted digital signature with one click, but also has email signature and encryption automation solution to help the express & logistics systems to send the signed PDF document by encrypted email to users, and completely make the electronic files with reliable digital signature without counterfeiting and make the delivery of electronic files more secure.

As shown in the above diagram on the right, users place orders on the express logistics website and handle business on the internal business system. The logistics management system generates various documents such as signing receipts for users to sign by hand on the business system and submit them to the express logistics management system. After processing is completed, the logistics management system calls the cloud MeSign eSigning Service system or locally calls the MeSign e-Signature System to sign the PDF file with Adobe trusted certificate. For services that do not require the user to fill in the form (such as invoice, statement, announcement or notice), the PDF file generated on the logistics management system can be directly called the MeSign eSigning Service to complete the PDF signature.

It is recommended to encrypt all important express & logistics documents. System just need to call MeSign public key certificate database (CerDB) to obtain the user's encryption certificate to encrypt the PDF file, the user can seamlessly view the encrypted PDF file using Adobe Reader. The logistics management system sends encrypted emails to users using the user's encryption certificate, ensuring the secure and reliable delivery of various user confidential documents. Users only need to use MeSign APP to decrypt and read the documents.

This solution has four advantages to ensure that all important express & logistics documents are trusted paperless and encrypted in delivery:

1. From the user's online application to the delivery of document, the whole process is trusted paperless and are automatically encrypted in delivery. All documents have digital signatures to prove the true identity of the issuer of the document, preventing the express & logistics documents from being counterfeited.
2. Not only the medical and health documents sent to users have Adobe global trusted digital signatures to prove their identity, but also the express & logistics documents can be encrypted with user certificate, and only designated users can open and read it.
3. This solution not only provide PDF file signing and encryption, but also it provides the function to deliver encrypted email to ensure that it will not be easily stolen and tampered with during the delivery process.
4. All signed PDF files can be stored by encrypted archives, and all files are time stamped to ensure that once all files are signed and archived, no one can modify these files. Otherwise, the signature and time stamp information will be invalidated, effectively ensuring the long-term security and credibility of the document. The timestamp signature is very useful for subsequent file inspections and audits and can ensure that the document signing behavior and the signing time is authentic, undeniable and cannot be tampered with.